CVE-2010-4523: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to 1 card-acos5.c, 2 card-atrust-acos.c, and 3 card-starcos.c...

PT-2011-1202

Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.11.13 Description The issue affects the opensc package in Gentoo Linux and is related to multiple stack-based buffer overflows in libopensc. These overflows can be triggered by a long serial-number field on a smart...

Miley Cyrus email Hacker arrested by FBI !

The guy who allegedly broke into Miley Cyrus' email account two years ago and flooded the Internet with scandalous pics of the underaged pop star was just arrested -- but NOT for hacking Hannah Montana. According to federal court docs, Josh Holly was busted in Nashville last Thursday after FBI...

Millions of Honda/Acura owners affected by hacked Honda database !

The Japanese motor company, Honda, today issued an alert to U.S. customers concerning a security breach resulting from a hacked database. The database that was managed by a third-party marketing group contained confidential information, including names of car owners, personal e-mail addresses, an...

White House E-Card Scam Part of Larger Zeus-Related Attack !

The simplistic spam campaign that hit around Christmas and purported to be a holiday greeting from the White House not only included a piece of Zeus-related malware that searches hard drives for documents and uploads them to a remote server, but also appears to be connected to a similar attack fr...

White House E-Card Scam Part of Larger Zeus-Related Attack

The simplistic spam campaign that hit around Christmas and purported to be a holiday greeting from the White House not only included a piece of Zeus-related malware that searches hard drives for documents and uploads them to a remote server, but also appears to be connected to a similar attack fr...

Is your Internet TV vulnerable to hackers ?

Manufacturers racing to create HDTVs that can connect to the Web may have rushed over an important step in trying to rush them to market: keeping them safe from hackers. According to the New York Times, security firm Mocana was able to hack an Internet-connected set "with unsettling ease." The ha...

[SECURITY] Fedora 14 Update: opensc-0.11.13-6.fc14

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

[SECURITY] Fedora 13 Update: opensc-0.11.13-6.fc13

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...

Pune police conducted 'Cyber Safe Pune 2010' !

The Pune police commissionerate conducted 'Cyber Safe Pune 2010' initiative from December 16 to 22 in the city. The initiative was aimed at creating awareness among people regarding cyber safety. The cyber crime cell conducted lectures at housing societies, schools, banks and colleges last week...

Hackers Shut Down Six Websites, Including Credit-Card Sharing Forums

A group of hackers recently attacked and took offline several websites belonging to credit-card sharing groups, security experts, and other hacking communities that had neglected basic security practices. On Christmas morning, the administrators of six websites discovered their sites had been...

Users Credit Card Information Stolen by Hackers from CitySights NY Website !

Most of us believe that by making online purchases through a secure website, with reputable companies, our credit card information is safe, right. That is not entirely true, as users of the popular website, CitySights NY recently discovered. You see, while the site itself may be secure, the...

CitySights NY Data Breach Exposes 110,000 Customers' Personal Information

CitySights NY, a company that organizes New York City tours on double-decker buses, has experienced a significant data breach. The personal information of 110,000 customers, including names, addresses, email addresses, credit card numbers, expiration dates, and Card Verification Value CVV2 codes,...

Beware of Christmas E-Cards: Tips to Avoid Holiday Scams

Your mailbox may be filling up with Christmas cards from friends and family, and so might your email inbox. But, as the song says, 'you better watch out,' because some of those merry emails could be from an internet Grinch looking to steal your peace of mind. Christmas cards are a great way to se...

Law Enforcement Officers Witness Cyber Theft Demonstration at UNLV Conference

Nearly 100 law enforcement officers recently witnessed how easily an identity thief can steal electronic information. During a UNLV conference, a cybercrime expert used a $30 device to intercept data from their smartphones. Welcome to the dark side of the 21st century. As technology advances, so ...

Sightseeing Firm Overlooks Security, 110k Credit Card Numbers Stolen

CitySights owner Twin America says the credit card details of 110,000 customers were stolen in a Web based attack and suggests it wasn’t following Payment Card Industry guidelines for storing card data. The parent company of the CitySights sightseeing tours company, Twin America LLC, said in a...

Dell Integrated Remote Access Controller (iDRAC) Web Interface Detection

The web interface for Dell Integrated Remote Access Controller iDRAC, formerly known as Dell Remote Access Controller DRAC, was detected on the remote host. C Tenable, Inc. Thanks to Jason Haar for his help! include'compat.inc'; if description scriptid51185; scriptversion"1.32";...

Globalization Fuels Cybercrime: A Threat to Australian Credit Card Holders

Globalization benefits consumers and businesses but also provides opportunities for organized crime. Many internet criminals join or form organized crime groups, motivated by economic, cultural, or technical reasons. Globally, individuals and mafia groups engage in illegal online activities, ofte...

Hackers Leverage Cloud Computing to Crack Passwords Efficiently

On-demand cloud computing is a valuable tool for companies needing temporary computing capacity without long-term investment in fixed capital. However, this same convenience makes cloud computing useful to hackers. Many hacking activities involve cracking passwords, keys, or other forms of brute...

Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass

Exploit for asp platform in category web applications ===================================================================== Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass =====================================================================...